OpenSSL 'EVP_VerifyFinal'函数签名验证漏洞

BUGTRAQ ID: 33150 CVE ID：CVE-2008-5077 CNCVE ID：CNCVE-20085077 OpenSSL是一款开放源码的SSL实现，用来实现网络通信的高强度加密。 部分OpenSSL函数验证DSA和ECDSA密钥时不正确验证"EVPVerifyFinal"函数返回值，发送特殊构建的签名证书链给客户端，可绕过签名检查。 通过恶意服务器或中间人攻击，可使证书链中的畸形SSL/TLS签名绕过客户端软件检查，导致盲目信任并泄漏敏感信息。 成功利用此漏洞需要服务器使用包含DSA或者ECDSA密钥的证书。 Ubuntu Ubuntu Linux 8.10 spar...

RedHat Security Advisory RHSA-2009:0004

The remote host is missing updates announced in advisory RHSA-2009:0004. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols as well as a full-strength, general purpose, cryptography library. The Google security team discovered a flaw ...

RedHat Security Advisory RHSA-2009:0008

The remote host is missing updates announced in advisory RHSA-2009:0008. D-Bus is a system for sending messages between applications. It is used for the system-wide message bus service and as a per-user-login-session messaging facility. A denial-of-service flaw was discovered in the system for...

RedHat Security Advisory RHSA-2009:0003

The remote host is missing updates announced in advisory RHSA-2009:0003. The xen packages contain the Xen tools and management daemons needed to manage virtual machines running on Red Hat Enterprise Linux. Xen was found to allow unprivileged DomU domains to overwrite xenstore values which should...

RedHat Security Advisory RHSA-2009:0005

The remote host is missing updates announced in advisory RHSA-2009:0005. GNOME VFS is the GNOME virtual file system. It provides a modular architecture and ships with several modules that implement support for various local and remote file systems as well as numerous protocols, including HTTP, FT...

RedHat Security Advisory RHSA-2009:0011

The remote host is missing updates announced in advisory RHSA-2009:0011. Little Color Management System LittleCMS, or simply lcms is a small-footprint, speed-optimized open source color management engine. Multiple insufficient input validation flaws were discovered in LittleCMS. An attacker could...

RedHat Security Advisory RHSA-2009:0018

The remote host is missing updates announced in advisory RHSA-2009:0018. The xterm program is a terminal emulator for the X Window System. A flaw was found in the xterm handling of Device Control Request Status String DECRQSS escape sequences. An attacker could create a malicious text file or log...

RedHat Security Advisory RHSA-2009:0011

The remote host is missing updates announced in advisory RHSA-2009:0011. Little Color Management System LittleCMS, or simply lcms is a small-footprint, speed-optimized open source color management engine. Multiple insufficient input validation flaws were discovered in LittleCMS. An attacker could...

RedHat Security Advisory RHSA-2009:0004

The remote host is missing updates announced in advisory RHSA-2009:0004. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols as well as a full-strength, general purpose, cryptography library. The Google security team discovered a flaw ...

RedHat Security Advisory RHSA-2009:0019

The remote host is missing updates announced in advisory RHSA-2009:0019. Hanterm is a replacement for xterm, a X Window System terminal emulator, that supports Hangul input and output. A flaw was found in the Hanterm handling of Device Control Request Status String DECRQSS escape sequences. An...

RedHat Security Advisory RHSA-2009:0005

The remote host is missing updates announced in advisory RHSA-2009:0005. GNOME VFS is the GNOME virtual file system. It provides a modular architecture and ships with several modules that implement support for various local and remote file systems as well as numerous protocols, including HTTP, FT...

RedHat Security Advisory RHSA-2009:0008

The remote host is missing updates announced in advisory RHSA-2009:0008. D-Bus is a system for sending messages between applications. It is used for the system-wide message bus service and as a per-user-login-session messaging facility. A denial-of-service flaw was discovered in the system for...

RedHat Security Advisory RHSA-2009:0003

The remote host is missing updates announced in advisory RHSA-2009:0003. The xen packages contain the Xen tools and management daemons needed to manage virtual machines running on Red Hat Enterprise Linux. Xen was found to allow unprivileged DomU domains to overwrite xenstore values which should...

RedHat Security Advisory RHSA-2009:0002

The remote host is missing updates announced in advisory RHSA-2009:0002. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or,...

RedHat Security Advisory RHSA-2009:0002

The remote host is missing updates announced in advisory RHSA-2009:0002. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or,...

Ruby resolv.rb可预测事件ID和源端口DNS欺骗漏洞

BUGTRAQ ID: 31699 CVECAN ID: CVE-2008-3905 Ruby是一种功能强大的面向对象的脚本语言。 Ruby的resolv.rb对DNS请求使用了固定的源端口和顺序排列的事件ID，这允许远程攻击者相对容易的伪造DNS响应，扮演成中间人执行网络钓鱼等各种攻击。 Yukihiro Matsumoto Ruby 1.8.x 厂商补丁： RedHat ------ RedHat已经为此发布了一个安全公告（RHSA-2008:0897-01）以及相应补丁: RHSA-2008:0897-01：Moderate: ruby security update...

PHP 'mbstring扩展缓冲区溢出漏洞

BUGTRAQ ID: 32948 CVE ID：CVE-2008-5557 PHP是一款网络编程语言。 PHP mbstring扩展存在输入验证错误，远程攻击者可以利用漏洞使应用程序崩溃。 mbstring扩展用于处理多字节unicode字符串，在解码部分HTML实体为unicode字符串时存在问题，由于解码器不正确处理错误条件，堆分配缓冲区的边界检查可被有效的绕过。攻击者利用漏洞可传送任意数据到堆特定域而以应用程序权限执行任意指令。 PHP PHP 5.2.6 PHP PHP 5.2.5 PHP PHP 5.2.4 PHP PHP 5.2.3 PHP PHP 5.2.2 PHP PH...

CUPS cupsd RSS订阅空指针引用本地拒绝服务漏洞

BUGTRAQ ID: 32419 CVECAN ID: CVE-2008-5183 Common Unix Printing System（CUPS）是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 如果向默认监听于631/tcp端口的CUPS守护程序（/usr/sbin/cupsd）添加了多于100个RSS订阅的话，就会触发空指针引用，导致守护程序崩溃。 Easy Software Products CUPS 1.3.8 RedHat ------...

Adobe Flash Player for Linux SWF文件处理代码执行漏洞

BUGTRAQ ID: 32896 CVECAN ID: CVE-2008-5499 Flash Player是一款非常流行的FLASH播放器。 Flash Player实现上存在漏洞，如果使用Linux版本的Adobe Flash Player打开了特制的SWF文件的话，就可能导致在用户系统上执行任意代码。 Adobe Flash Player for Linux 9.x Adobe Flash Player for Linux 10.x Adobe ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Fedora 9 : rsyslog-3.20.2-2.fc9 (2008-11538)

Security fixes for CVE-2008-5617 and CVE-2008-5618, detailed in: http://www.rsyslog.com/Article322.phtml http://secunia.com/Advisories/32857/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...